While I was ok with posting the .mfa myself, I think for everyone else's peace of mind either set up a private way for submitting those, or have it clear in the Jam rules that the whatever you make is to be publicly available, and recommend using public domain assets only?